Box CEO on the AI Adoption Gap | The a16z Show

Summary

• The enterprise AI adoption gap is governed less by model capability than by permissions, liability, and operational control. Startups have little to “blow up,” while a bank must contain prompt injection, accidental writes, conflicting agents, and information leakage before granting autonomy. The result: “the diffusion of AI capability is going to take longer than people in Silicon Valley realize.”
• Software demand could be transformed if organizations deploy “a hundred or a thousand times more agents than people.” Aaron Levie argues that vendors must expose APIs, CLIs, tools, identity, and access controls because business performance will increasingly correlate with how effectively agents reach company data. Martin Casado’s caveat is that interface polish is not the moat: agents select backends based on semantics, cost, durability, and similar substance rather than interface or documentation quality.
• Systems of record are far more defensible than the “SaaS apocalypse” framing implies. Steven Sinofsky calls it “just absurd to think you’re going to vibe-code your way to SAP,” because decades of domain knowledge reside across interfaces, middle tiers, workflows, and operating habits—not in one clean data layer. Agents may change consumption and monetization faster than they replace core systems.
• AI initially raises the value of domain experts who can decompose work, then moves that skill into a higher abstraction layer. Most employees cannot produce a flowchart of their own job, making “algorithmic thinking” the immediate bottleneck; Casado’s Anthropic growth-marketer example showed one systems thinker automating work previously spread across five or 10 roles. Sinofsky expects the “rocket-science part” to evaporate as spreadsheet complexity once did.
• Giving every agent a separate account does not make it equivalent to an employee. Agents can be given phone numbers, Gmail accounts, cards, and role-based permissions, but their owners retain liability and require complete oversight; anything entering a context window might still be extracted through prompt injection. For sensitive workflows such as an M&A data room, Sinofsky suggests the near-term enterprise state may remain read-only “for a number of years before N is very large.”
• The panel rejects Wall Street’s fixed-revenue-pie assumptions and sees AI demand as structurally underestimated. Sinofsky says forecasts are “off by at least an order of magnitude,” invoking PCs, cloud, and CRM as markets where falling friction expanded consumption rather than merely reallocating spend. Casado adds that every one of the infrastructure companies he can observe has gone “asymptotic” over six months because far more software is being written.
• Token spending is nevertheless an immediate earnings and management problem, even if efficiency eventually overwhelms scarcity. Engineering compute could plausibly range from 1% to 100% of relevant expense in today’s debate; with public-tech R&D at roughly 14%-30% of revenue, compute costing twice the engineering team versus being 3% more can determine EPS. Martin calls this “the most wild” budget conversation ahead, while Sinofsky predicts a transistor-like shift will make today’s token accounting disappear: “guaranteed.”

Deep dive

Not yet available upstream; scheduled sync will retry.